Vendor
Nlnet Labs
94 known vulnerabilities in products by Nlnet Labs, 0 of them actively exploited (CISA KEV).
Key figures
94
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33278 | Possible arbitrary code execution during DNSSEC validation | 9.8 | |
| Critical | CVE-2026-81642 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY | 9.8 | |
| Critical | CVE-2026-82717 | CNAME synthesis could lead to heap corruption | 9.8 | |
| High | CVE-2024-1931 | Denial of service when trimming EDE text on positive replies | 7.5 | |
| Medium | CVE-2017-15105 | NLnet Labs Unbound: Improperly Implemented Security Check for Standard | 5.3 | |
| High | CVE-2026-42944 | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options | 7.5 | |
| High | CVE-2026-42959 | Crash during DNSSEC validation of malicious content | 7.5 | |
| High | CVE-2022-3204 | NRDelegation Attack | 7.5 | |
| Critical | CVE-2026-18664 | Wrong interpretation of ACL ranges | 9.1 | |
| High | CVE-2026-72753 | Routinator incorrectly handles delta updates | 8.2 | |
| High | CVE-2026-101341 | Stack overwrite from specially formatted TXT-DATA RDATA field | — | |
| High | CVE-2026-101339 | Stack overwrite from a specially crafted and formatted HIP RR | — | |
| High | CVE-2026-101338 | Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR | — | |
| High | CVE-2026-101337 | Stack overwrite from specially formatted base64 RDATA field | — | |
| High | CVE-2021-43173 | Hanging RRDP request | 7.5 | |
| High | CVE-2026-41292 | Long list of incoming EDNS options degrades performance | 7.5 | |
| High | CVE-2026-81634 | Possible heap buffer overflow during DNSSEC canonicalization | 7.5 | |
| High | CVE-2026-19401 | Remote UDP DoS by sending multiple DNS Cookie options | 7.5 | |
| High | CVE-2026-12244 | Heap overflow and crash with crafted SVCB RR | 8.8 | |
| High | CVE-2026-19538 | Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS | 7.5 | |
| High | CVE-2026-72758 | Routinator may exit on malformed ranges | 7.5 | |
| High | CVE-2026-72756 | Routinator exits on malformed rsync URIs | 7.5 | |
| High | CVE-2026-72754 | Routinator exits when parsing an incorrect or very large CRL file | 7.5 | |
| High | CVE-2026-12245 | Denial of DNS over TLS service by any DoT client | 7.5 | |
| High | CVE-2026-18916 | Remote TCP DoS by throttling the TCP receive window | 7.5 |
News
Products
| Unbound | 58 | 0 |
| Routinator | 20 | 0 |
| Nsd | 13 | 0 |